TI-2026-83082 CVE-2026-119597 · GHSA-fc52-73gp-r537
OpenDeepWiki hard-coded JWT key lets attackers forge admin tokens
Priority HIGH 81
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json.